The ISO 45001 certification process
You go through six steps from decision to certificate. Count on three to six months.
The six steps to certification
- Determine intake and scope - Which parts of your organisation? Which locations? The certification body makes a quotation based on this scope.
- GAP analysis (optional) - A baseline measurement: where are you now? What still needs to be done? Not required, but helps with planning.
- Implementation of management system - Drawing up documentation, setting up processes, training employees. Operational for at least three months before certification is possible.
- Phase 1 audit (documentation check) - The auditor reviews your documentation. Are the required documents present and up to date?
- Phase 2 Audit (Practical Testing) - On-site audit. The auditor speaks with employees, examines processes and checks whether theory and practice correspond.
- Certificate and maintenance - Upon approval: three-year certificate. An annual surveillance audit, recertification after three years.
Who does what?
You
Setting up system, internal audits, preparing employees
Consultant (optional)
Guidance, templates, training
Certification body
Perform audit, issue certificate
Accreditation body
Checks the certification body (the Dutch body, UKAS, DAkkS, etc.)
Preparation for ISO 45001
Good preparation is half the battle. Most of the time is spent setting up your management system, not auditing it.
What do you need to arrange internally?
The most important preparation steps:
- Assign responsibilities - Who is ultimately responsible? Who coordinates?
- Update RI&E - Your Risk Inventory and Evaluation is the basis
- Describe processes - How do you work safely? What are the procedures?
- Employee Involvement - ISO 45001 requires employee participation
- Internal audit - Test whether everything works before the certification body arrives
- Management review - Management Review: discuss results with management
What documentation is needed?
The standard requires at least:
OH&S policy
Your vision on safety, signed by management
RI&E
Risk Inventory and Evaluation (legally required)
Objectives
Measurable safety goals
Process descriptions
How to work safely
Competency overview
Who is responsible for what
Emergency procedures
Emergency response, evacuation, emergency plan
Internal audit report
Evidence of internal control
Management assessment report
Management Review
No need for a thick manual. The form is free. Many companies work digitally or with compact documents.
Three common mistakes
Error 2: RI&E not up to date
An outdated RI&E is a common deviation. Make sure your RI&E is recent and covers all current risks.
Mistake 3: Employees not involved
ISO 45001 requires employee participation. If employees do not know what the system entails, this will be noticed during the audit.